ip inspect on ingress or egress interface

When setting up a CBAC (ip inspect) firewall on an IOS router should the "ip inspect" command be placed on the internal interface and use "ip inspect in" or should I use "ip inspect out" on the public or egress interface? What are the pros and cons of each?

Re: ip inspect on ingress or egress interface

Sorry, but that links just reiterates my comment that the inspect command can be used as "in" on the ingress and "out" on the egress. What I want to know is if there is any advantage or disadvantage of using one form or the other? I typically has used it as "in" on the ingress" but I have seem some examples using it as "out". Why?

DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
view more

Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :
----------------------------------------------------------------
Technolo...
view more